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FAULT-TOLERANT ELECTRIC MOTOR CONTROL SYSTEM 

Field of the Invention 

[0001] The present application relates to electric motors, and in particular, to a control system 

for providing fault-tolerant operation of a multiphase electric motor. 
Background of the Invention 

[0002] For an electric motor that performs critical functions, for example in military 

applications, it is essential that the motor continues its operation even in the event of a failure 
of a phase. Therefore, comprehensive fault tolerance becomes a major aspect of the motor 
design. Conventionally, a motor is equipped with redundant elements to support fault- 
tolerant operation. 

[0003] For example, U.S. patent 4,434,389 discloses a brushless DC motor having a 

permanently magnetized rotor and a stator with redundant sets of windings. The rotor is 
formed with four or more magnetic poles. Two sets of stator windings being used in a four- 
pole motor, three sets being used in a six -pole motor, and four sets being used in an eight-pole 
motor. The windings in each set are connected in wye, delta or star configuration for three- 
phase excitation. The switching of the currents in the individual windings in each set of 
windings is accomplished mechanically by a commutator, or electronically by commutation 
circuits coupled to individual sets of windings. Sensing of the relative position between 
moving and stationary portions of the motor is accomplished by independent sets of position 
sensors coupled independently to corresponding commutation circuits. The commutation 
circuits may be operated simultaneously for maximum torque, with reduced torque being 
available in the event of failure of one or more circuits or windings. 
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[0004] Hence, the redundancy is provided at the expense of complex winding patterns 

causing higher cost of design and operation. 

[0005] Accordingly, it would be desirable to develop a control system that would provide 

fault-tolerant operation of a motor without redundant elements. 
Disclosure of the Invention 

[0006] The present invention offers a novel control system for a multiphase motor that does 

not need redundant elements in order to continue its operation when a phase fails. In the event 
of a phase failure, the control system of the present invention enables the motor to operate 
without a need to carry out any fault correction procedure. 

[0007] Moreover, the control system of the present invention gives the user high flexibility by 

providing a choice between operating without fault correction or performing an appropriate 
fault correction procedure. In addition, fault-correction parameters defining motor 
characteristics when a phase is lost may be customized in accordance with user's preferences. 

[0008] The control system is provided for controlling a motor having a plurality of stator 

phase components and a rotor. Each stator phase component comprises a phase winding 
formed on a core element. The control system comprises energization circuitry connected to 
the stator phase windings for energizing each phase winding, and a control circuit for defining 
phase currents for individual phases of the motor to generate control signals applied to the 
energization circuitry for energization of the phase windings. When at least one phase of the 
motor fails, a mode selection circuit enables the control circuit to operate either in a non- 
correction mode or in a fault-correction mode. 

[0009] Whereas in the non-correction mode of operation, phase currents for phases that 

remain operational are maintained unmodified; in the fault-correction mode, the phase 
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currents for the remaining phases are modified in accordance with pre-set parameters. The 
control circuit may disable energization of the phase winding corresponding to the failed 
phase. 

[0010] In accordance with an embodiment of the invention, the pre-set parameters for phase 

current modification in the fault-correction mode may include the maximum current 
magnitude at a phase angle corresponding to the failed phase, and the minimum current 
magnitude at a phase angle shifted by 90 degrees with respect to the failed phase. Based on 
the pre-set parameters, the control circuit may modify phase current for a phase that remains 
operational after a failure of another phase in accordance with a phase angle distance or offset 
between the remaining phase and the failed phase. 

[001 1] The pre-set parameters for phase current modification may be customized in 

accordance with user's preferences to achieve a desired balance between total torque of the 
motor and torque ripple. 

[0012] Additional advantages of the present invention will become readily apparent to those 

skilled in this art from the following detailed description, wherein only the preferred 
embodiment of the invention is shown and described, simply by way of illustration of the best 
mode contemplated of carrying out the invention. As will be realized, the invention is capable 
of other and different embodiments, and its several details are capable of modifications in 
various obvious respects, all without departing from the invention. Accordingly, the drawings 
and description are to be regarded as illustrative in nature, and not as restrictive. 
Brief Description of the Drawings 

[0013] Fig. 1 is an exemplary view showing rotor and stator elements in a configuration that 

may be employed in the present invention. 
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[0014] Fig. 2 is a simplified block diagram illustrating the fault-tolerant control system of the 

present invention. 

[0015] Fig. 3 is a flow-chart illustrating a fault-tolerant mode selection procedure of the 

present invention. 

[0016] Fig. 4 is a flow-chart illustrating an exemplary fault-correction algorithm of the 

present invention. 

[0017] Fig. 5 is a diagram illustrating exemplary pre-set parameters for phase current 

modification in a fault-correction mode of the present invention. 

[0018] Figs. 6 A and 6B are diagrams illustrating phase current modification in the fault- 

correction mode. 

[0019] Figs. 7, 8 and 9 are diagrams illustrating torque produced by each phase to achieve 

total torque of the motor. 
Detailed Description of the Invention 

[0020] The present invention is applicable to controlling an electric motor such as disclosed 

in the copending U.S. Application number 09/826,422 of Maslov et al., filed April 5, 2001 
and incorporated herewith by reference, although the invention can be used with various other 
permanent magnet motors and switched-reluctance motors. Fig. 1 is an exemplary view 
showing rotor and stator elements of a motor 10 as described in that application, the 
disclosure of which has been incorporated herein. Rotor member 20 is an annular ring 
structure having permanent magnets 21 substantially evenly distributed along cylindrical back 
plate 25. 

[0021] The permanent magnets are rotor poles that alternate in magnetic polarity along the 

inner periphery of the annular ring. The rotor surrounds a stator member 30, the rotor and 
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stator members being separated by an annular radial air gap. Stator 30 comprises a plurality 
of electromagnet core segments of uniform construction that are evenly distributed along the 
air gap. Each core segment comprises a generally U-shaped magnetic structure 36 that forms 
two poles having surfaces 32 facing the air gap. The legs of the pole pairs are wound with 
windings 38, although the core segment may be constructed to accommodate a single winding 
formed on a portion linking the pole pair. 
[0022] Each stator electromagnet core structure is separate, and magnetically isolated, from 

adjacent stator core elements. The stator elements 36 are secured to a non-magnetically 
permeable support structure, thereby forming an annular ring configuration. This 
configuration eliminates emanation of stray transformer flux effects from adjacent stator pole 
groups. The stator electromagnets are thus autonomous units comprising respective stator 
phases. The concepts of the invention described below are also applicable to other permanent 
magnet motor structures, including a unitary stator core that supports all of the phase 
windings. 

[0023] Fig. 2 is a block diagram of a motor control system in accordance with the present 

invention. The control system includes controller 210 for controlling multiphase motor 10 
that comprises rotor 20 and stator 30 shown Fig. 1 . The stator has a plurality of phase 
windings that are switchably energized by driving currents supplied by power electronic (PE) 
circuits 220. For example, Fig. 2 shows PE circuits 220-1 to 220-7 provided for seven stator 
phase windings. However, the present invention is applicable to any number of motor phases. 

Each PE circuit may include an electronic switch set controlled by controller 210 via a 
driver element. The switch sets may comprise a plurality of MOSFET H-Bridges, such as 
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International Rectifier IRFIZ48N-ND. The gate driver may comprise Intersil MOSFET gate 
driver HIP4082IB. 

[0024] The controller 210 has one or more user inputs and a plurality of inputs for motor 

conditions sensed during operation. Current in each phase winding is sensed by a respective 
one of a plurality of current sensors 230 whose outputs are provided to the controller 210. 
The controller may have a plurality of inputs for this purpose or, in the alternative, signals 
from the current sensors may be multiplexed and connected to a single controller input. Hall 
effect current sensors, such as F.W. Bell SM-15, may be utilized for currents sensors 230. 

[0025] Rotor position sensor 240 is connected to another input of the controller 210 to 

provide position signals thereto. The position sensor may comprise any known sensing means, 
such as a Hall effect devices (Allegro Microsystems 92B5308), giant magneto resistive 
(GMR) sensors, capacitive rotary sensors, reed switches, pulse wire sensors including 
amorphous sensors, resolvers, optical sensors and the like. The output of the position sensor 
240 may be applied to a speed approximator 242, which converts the position signals to speed 
signals to be applied to another input of the controller 210. 

[0026] The controller 210 may comprise a microprocessor or equivalent microcontroller, 

such as Texas Instrument digital signal processor TMS320LF2407APG. In order to develop 
desired phase currents, the controller 210 generates the following control voltage: 
Vi (t) = Lidldi /dt + Ri Ii + Ei + ksiei 

where 

Vi(t) is the voltage across the phase winding; 

Idi (t) is the desired phase current to be produced to obtain desired torque; 
Ii(t) is the phase current; 
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Ri is the winding resistance; 

Ei(t) is the back - EMF; 

Li is the winding self-inductance; 

ksi is the current loop feedback gain; and 

ei is the phase current error. 
[0027] The control voltage Vi (t) at the output of the controller 210 represents a calculated 

voltage value required to obtain the user's requested torque. In operation, the controller 210 
defines phase current Idi (t) in each phase required to obtain the desired torque, and produces 
control signals Vi (t) for each phase based on the expression presented above. The control 
signals Vi (t) are successively supplied to the PE circuits 220 for individual energization of 
respective phase windings. Via the gate drivers, switch sets in the respective PE circuits 220 
are activated so that the sequence in which windings are selected comports with a sequence 
established in the controller. Each successive control signal Vi (t) is related to the particular 
current sensed in the corresponding phase winding. The controller operation is disclosed in 
more detail in the copending U.S. Application number 10/173,610 of Maslov et al., filed June 
19, 2002 and incorporated herewith by reference 
[0028] The controller 210 includes a fault-tolerant mode selector 250 for selecting a mode of 

fault-tolerant operations performed when at least one phase of the motor 10 fails. The fault- 
tolerant mode selector 250 may be a register or an electronic circuit programmable by the user 
or controllable in accordance with motor conditions. Alternatively, the mode selector 250 
may be arranged outside the controller 210. As described in more detail below, in the event of 
a phase failure, the fault-tolerant mode selector 250 enables the controller 210 to operate in 



7 



one of the following fault-tolerant modes of operation: non-correction mode and fault- 
correction mode. 

[0029] In the non-correction mode, when at least one phase fails, the controller 210 does not 

modify the phase currents Idi (t) in the remaining phases of the motor 10. Instead, it may 
control the PE circuit 220 corresponding to the failed phase so as to disable energization of 
the respective phase winding. 

[0030] In the fault-correction mode, in the event of a phase failure, the controller 210 

interacts with a fault-correction unit 260 to modify the phase currents Idi (t) in the phases that 
remain operational in accordance with a prescribed fault-correction algorithm. For example, 
the fault correction unit 260 may comprise a look-up table containing a predetermined set of 
parameters for modifying the phase currents Idi (t) in the phases that remain operational. As 
described below, this set of parameters may be customized in accordance with user's 
preferences. 

[0031] Fig. 3 is a simplified flow-chart illustrating fault-tolerant operation of the motor 

control system of the present invention. The controller 210 monitors its inputs to detect a 
failure of a motor phase (step 302). For example, a phase failure may be detected using 
current sensors 230 that measure phase current Ii(t) for each phase of the motor. If any current 
sensor 230 detects abnormal value of phase current Ii(t) for a predetermined period of time, 
the controller 210 detects a phase failure condition and identify a failed phase (step 304). 

[0032] For example, if phase current Ii(t) for a phase suddenly drops to zero and does not 

return to its normal trajectory for a predetermined time period, the controller 210 determines 
that the circuit for the respective phase is open. Further, if phase current Ii(t) for a phase 
suddenly increases over a pre-set limit and does not return to its normal trajectory for a 
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predetermined time period, the controller 210 determines that the circuit for the respective 
phase is shorted. 

[0033] Accordingly, to detect a failure of a phase, the controller 210 may monitor a phase 

current error for the respective phase. The phase current error is a difference between the 
desired phase current Idi(t) and the actual phase current Ii(t) measured by the respective 
current sensor. The desired phase current Idi (t) for each phase is defined by the controller 210 
in accordance with a torque requirement, based on the position and speed determined by the 
position sensor 240 and the speed approximator 242. The controller 210 considers any phase 
to be a failed phase, if the absolute value of a phase current error for that phase exceeds a pre- 
set limit for a predetermined time period. 

[0034] When a phase failure is detected, the controller 210 checks the fault-tolerant mode 

selector 250 to establish a prescribed fault-tolerant mode of operation (step 306). The mode 
selector 250 may be pre-programmed by the user to request the controller 210 to operate 
either in a non-correction mode or in a fault correction mode if a phase failure condition is 
detected. 

[0035] Alternatively, the mode selector 250 may be automatically controlled to select an 

appropriate fault-tolerant mode of operation depending on motor conditions at the time when 
a phase failure is detected. For example, when at least one phase fails, the mode selector 250 
may be controlled to set a non-correction mode of operation, if phase currents Ii(t) for a 
predetermined number of remaining phases exceed a threshold level. In this case, 
modification of phase current values for the remaining phases would reduce the total torque 
value of the motor. In certain situations, the total torque reduction may be undesirable. 



9 



[0036] Accordingly, when a failure of a phase is detected, the controller 210 may compare 

phase current values detected by the current sensors 230 for the remaining phases with a 
threshold level. If the phase current values for a predetermined number of phases exceed the 
threshold level, the controller 210 controls the mode selector 250 to set a non-correction 
mode. Otherwise, a fault-correction mode may be set. 

[0037] Hence, if in step 306, the controller 210 determines that the fault-correction mode is 

not set, it switches into the non-correction mode of operation (step 308). In the non-correction 
mode of operation, the controller 210 may control the PE circuit 220 corresponding to the 
failed phase to disable energization of the respective phase winding. In the non-correction 
mode, motor parameters relating to the phases that remain operational, including respective 
phase currents, are not modified despite a phase failure. 

[0038] If in step 306, the controller 210 determines that the fault-correction mode is set, it 

switches into the fault-correction mode of operation (step 310). In the fault-correction mode, 
the controller 210 modifies the desired phase currents Idi (t) in the phases that remain 
operational in accordance with a prescribed fault-correction algorithm. 

[0039] Fig. 4 illustrates an exemplary fault-correction algorithm that may be carried out in the 

fault-correction mode of operation. The controller 210 identifies failed phase j (step 312), and 
computes a phase angle offset or distance Djk between the failed phase j and each of phases k 
that remain operational (step 314), where j and k are integral numbers from 1 to Ns, and Ns is 
the number of phases in the motor 10. 

[0040] Further, the controller 210 obtains values of torque x requested by the user and motor 

speed co determined by the speed approximator 242 (step 316). These values are used as 
indexes for accessing a fault-correction look-up table contained in the fault correction unit 
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260. The fault-correction look-up table contains parameters II and 12 utilized for calculation 
of a desired phase current magnitude for each of the remaining phases k. Parameter II 
represents the maximum current magnitude at a phase location arranged at a predetermined 
phase angle with respect to the failed phase j. For example, the maximum current magnitude 
may be at a phase location corresponding to the failed phase j. Parameter 12 represents the 
minimum current magnitude at a phase angle shifted by 90 degrees from the phase location of 
the maximum current magnitude. In the fault-correction look-up table, parameters II and 12 
are provided for various combinations of requested torque and present speed. 

[0041] In step 318, the controller 210 accesses the fault-correction look-up table to obtain 

parameters II and 12 for the torque and speed determined in step 316. Based on these 
parameters, the controller 210 in step 320 determines the amplitude Ik of the desired phase 
current for each phase k that remains operational as Ik = II - (II - 12) x Djk/90 degrees. The 
amplitude Ij of the desired phase current for the failed phase j is set to 0. Hence, the 
amplitude of the desired phase current for each phase k is set between II and 12 depending on 
the distance of phase k from the failed phase. The modified desired phase current for each 
phase is used by the controller 210 to determine the control voltage Vi(t) supplied to the 
respective PE circuit 220 to energize the corresponding phase winding. 

[0042] Fig. 5 is a diagram illustrating the fault-correction algorithm that involves 

modification of phase currents in accordance with parameters II and 12. For example, 
parameter II may represent the phase current magnitude at a phase corresponding to the failed 
phase j, and parameter 12 may represent the phase current magnitude at a phase angle shifted 
by 90 degrees with respect to the failed phase j. The controller 210 modifies a phase current 
magnitude for a phase, which are closer to the failed phase j, to make it higher than a phase 
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current magnitude for a phase, which are more distant from the failed phase j. In particular, 
modified phase current magnitude for phase j-1, which is the closest phase to the failed phase 
j, is higher than modified phase current magnitude for the next phase j-2, which in turn is 
higher than modified phase current magnitude for phase j-(Ns-l)/2, the most distant phase 
from the failed phase j. Magnitude 10 is a phase current value in each phase before the failure 
of the phase j. 

[0043] Figs. 6A and 6B are diagrams respectively showing phase currents in a seven-phase 

motor without fault correction and with fault correction in accordance with the fault- 
correction algorithm of the present invention. These diagrams illustrate the case when phase 3 
fails, and the phase current for phase 3 is set to 0. Without fault correction, phase currents for 
phases 1, 2 and 4-7, which remain operational, have magnitude 10 set, for example, to 10A 
(Fig. 6A). With fault correction, the controller 210 sets magnitudes of phase currents for 
operational phases 1, 2 and 4-7 in the range between II and 12. For example, II may be set to 
12 A and 12 may be set to 5 A. 

[0044] The fault-correction algorithm of the present invention enables the controller 210 to 

re-distribute phase currents among phases that remain operational to re-balance torque 
contribution from each phase. Fig. 7 is a diagram showing torque produced by each phase, i.e. 
torque contribution from each phase of a seven-phase motor in a normal mode of operation 
for sine-wave profile of phase currents. As all phases are operational, total torque for all 
phases equal, for example, to 35 Nm may have practically no ripples 

[0045] Fig. 8 is a diagram showing torque contribution from each of operational phases 1, 2 

and 4-7, when phase 3 fails but phase currents for the remaining phases are not modified. As 
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illustrated in this diagram, the failure of a phase cause a substantial torque ripple equal, for 
example, to 0.17 for total torque varying between 25 to 35 Nm. 
[0046] Fig. 9 is a diagram illustrating torque contribution from each of operational phases 1, 2 

and 4-7, when phase 3 fails and phase currents for remaining phases are re-distributed in 
accordance with a fault-correction algorithm of the present invention. As shown in this 
diagram, torque ripple may be reduced to about 0.04 for total torque varying between 23 and 
25 Nm. 

[0047] To achieve a desired balance between total torque value and torque ripple, values of 

fault-correction parameters II and 12 may be customized in accordance with user's 
preferences. Therefore, the fault-correction unit 260 may contain several sets of fault 
correction parameters II and 12 for each combination of torque and speed. 

[0048] For example, to achieve the maximum torque of the motor after a phase is lost, 

parameter 12 should be selected to be at a level of parameter II. Moreover, both these 
parameters should be set to the maximum possible current value. However, such a selection 
will increase torque ripple. As a result, the motor may become unbalanced. To minimize 
torque ripple so as to achieve smooth operation of the motor when a phase fails, an optimum 
difference between values of parameters II and 12 may be experimentally established. 

[0049] Hence, the motor controlled by the control system of the present invention does not 

need redundant elements in order to continue its operation when a phase fails. The control 
system gives the user high flexibility by enabling motor fault-tolerant operations with or 
without fault correction depending on user's preferences and motor conditions. Moreover, 
fault-correction parameters defining motor characteristics when a phase is lost may be 
customized in accordance with user's preferences. 



13 



[0050] Although the invention is disclosed with an example of separated magnetic circuits for 

each electric phase of the motor, the invention is applicable to other motor arrangements such as 
motors containing a common magnetic path. Hence, it is to be understood that the invention is 
capable of changes and modifications within the scope of the inventive concept as expressed 
herein. 
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